@kody-ade/kody-engine 0.4.330 → 0.4.332

package/dist/bin/kody.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@kody-ade/kody-engine",
-      version: "0.4.330",
+      version: "0.4.332",
       description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
       license: "MIT",
       type: "module",
@@ -15340,7 +15340,14 @@ function parseAgentFactoryBundle(raw) {
       content: readJsonString(file.content, `files[${index}].content`)
     };
   });
-  return { title, summary, files };
+  return {
+    title,
+    summary,
+    files,
+    model: value.model,
+    models: value.models,
+    modelCreatorContractsUsed: value.modelCreatorContractsUsed
+  };
 }
 function buildAgentFactoryBranchName(issueNumber, title, now = Date.now()) {
   const slug2 = title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48).replace(/-+$/g, "");
@@ -18231,6 +18238,255 @@ var init_syncFlow = __esm({
   }
 });
 
+// src/scripts/validateAgentFactoryBundle.ts
+function validateModelBundle(bundle, producer) {
+  const failures = [];
+  const expectedKind = CREATOR_KIND[producer];
+  if (producer === FACTORY_PRODUCER) {
+    const contracts = stringArray5(bundle.modelCreatorContractsUsed);
+    for (const contract of CREATOR_CONTRACTS) {
+      if (!contracts.includes(contract)) failures.push(`modelCreatorContractsUsed missing ${contract}`);
+    }
+    if (!Array.isArray(bundle.models) || bundle.models.length === 0) {
+      failures.push("agent-factory bundle must include non-empty models array");
+      return failures;
+    }
+    for (const [index, model] of bundle.models.entries()) {
+      validateOneModel(model, bundle.files, `models[${index}]`, false, failures);
+    }
+    validateFactoryAssembly(bundle.models, failures);
+    return failures;
+  }
+  validateOneModel(bundle.model, bundle.files, "model", true, failures, expectedKind, producer);
+  return failures;
+}
+function validateOneModel(rawModel, files, label, strictSingleModel, failures, expectedKind, producer) {
+  if (!rawModel || typeof rawModel !== "object" || Array.isArray(rawModel)) {
+    failures.push(`${label} must be an object`);
+    return;
+  }
+  const model = rawModel;
+  const kind = stringField6(model.kind);
+  if (!isModelKind(kind)) failures.push(`${label}.kind must be agent, capability, goal, agentLoop, or workflow`);
+  if (expectedKind && kind !== expectedKind && producer)
+    failures.push(`${producer} must output model.kind ${expectedKind}`);
+  const slug2 = stringField6(model.slug);
+  if (!isSlug2(slug2)) failures.push(`${label}.slug must be a lowercase slug`);
+  if (isModelKind(kind)) {
+    const docsUsed = stringArray5(model.docsUsed);
+    for (const doc of REQUIRED_DOCS[kind]) {
+      if (!docsUsed.includes(doc)) failures.push(`${label} docsUsed missing ${doc}`);
+    }
+    validateFilesForKind(kind, slug2, files, strictSingleModel, failures);
+    validateModelShape(kind, model, failures);
+  }
+}
+function validateFilesForKind(kind, slug2, files, strictSingleModel, failures) {
+  const paths = files.map((file) => normalizeBundlePath(file.path));
+  if (paths.some((filePath) => filePath === "executables" || filePath.startsWith("executables/"))) {
+    failures.push("files must not use obsolete executables storage");
+  }
+  if (kind === "agent") {
+    requirePath(paths, `agents/${slug2}.md`, "agent file", failures);
+    if (strictSingleModel) rejectOtherRoots(paths, ["agents/"], "agent", failures);
+  }
+  if (kind === "capability") {
+    requirePath(paths, `capabilities/${slug2}/profile.json`, "capability profile", failures);
+    requirePath(paths, `capabilities/${slug2}/capability.md`, "capability body", failures);
+    if (strictSingleModel) rejectOtherRoots(paths, [`capabilities/${slug2}/`], "capability", failures);
+    const profile = parseJsonFile(files, `capabilities/${slug2}/profile.json`, failures);
+    if (profile) {
+      const profileName = stringField6(profile.name);
+      if (profileName && profileName !== slug2) failures.push("capability profile name must match model.slug");
+      if (profile.agent !== void 0)
+        failures.push("capability profile must not set agent; agent wiring belongs outside capability creation");
+      if (!["observe", "act", "verify"].includes(stringField6(profile.capabilityKind))) {
+        failures.push("capability profile must declare capabilityKind observe, act, or verify");
+      }
+    }
+  }
+  if (kind === "goal") {
+    requirePath(paths, `goals/templates/${slug2}/state.json`, "goal template state", failures);
+    if (strictSingleModel) rejectOtherRoots(paths, [`goals/templates/${slug2}/`], "goal", failures);
+  }
+  if (kind === "agentLoop") {
+    if (!paths.some((filePath) => filePath.endsWith("/state.json")))
+      failures.push("agentLoop must produce a state.json file");
+    if (strictSingleModel) rejectOtherRoots(paths, ["goals/templates/", "loops/"], "agentLoop", failures);
+  }
+  if (kind === "workflow") {
+    requirePath(paths, `capabilities/${slug2}/profile.json`, "workflow capability profile", failures);
+    const profile = parseJsonFile(files, `capabilities/${slug2}/profile.json`, failures);
+    if (profile && (!profile.workflow || typeof profile.workflow !== "object")) {
+      failures.push("workflow profile must include workflow object");
+    }
+  }
+}
+function validateFactoryAssembly(models, failures) {
+  const available = /* @__PURE__ */ new Map();
+  for (const model of models) {
+    if (!model || typeof model !== "object" || Array.isArray(model)) continue;
+    const input = model;
+    const kind = stringField6(input.kind);
+    const slug2 = stringField6(input.slug);
+    if (isModelKind(kind) && isSlug2(slug2)) available.set(`${kind}:${slug2}`, kind);
+  }
+  for (const model of models) {
+    if (!model || typeof model !== "object" || Array.isArray(model)) continue;
+    const input = model;
+    const kind = stringField6(input.kind);
+    if (kind === "goal") {
+      for (const capability of stringArray5(input.capabilities)) {
+        if (!available.has(`capability:${capability}`)) {
+          failures.push(`goal ${stringField6(input.slug)} references missing capability ${capability}`);
+        }
+      }
+    }
+    if (kind === "workflow") {
+      for (const step of arrayObjects(input.steps)) {
+        const capability = stringField6(step.capability);
+        if (capability && !available.has(`capability:${capability}`)) {
+          failures.push(`workflow ${stringField6(input.slug)} references missing capability ${capability}`);
+        }
+      }
+    }
+    if (kind === "agentLoop") {
+      const wakeTarget = input.wakeTarget;
+      if (wakeTarget && typeof wakeTarget === "object" && !Array.isArray(wakeTarget)) {
+        const target = wakeTarget;
+        const type = stringField6(target.type);
+        const slug2 = stringField6(target.slug);
+        const modelKind = type === "loop" ? "agentLoop" : type;
+        if ((modelKind === "goal" || modelKind === "workflow" || modelKind === "capability") && !available.has(`${modelKind}:${slug2}`)) {
+          failures.push(`agentLoop ${stringField6(input.slug)} references missing ${type} ${slug2}`);
+        }
+      }
+    }
+  }
+}
+function validateModelShape(kind, model, failures) {
+  if (kind === "agent") {
+    requireStringArrayIncludes(model.owns, "identity", "agent owns", failures);
+    requireStringArrayIncludes(model.doesNotOwn, "tasks", "agent doesNotOwn", failures);
+  }
+  if (kind === "capability") {
+    if (!["observe", "act", "verify"].includes(stringField6(model.capabilityKind))) {
+      failures.push("capability model must declare capabilityKind observe, act, or verify");
+    }
+    if (!stringField6(model.ability)) failures.push("capability model must declare ability");
+    for (const field of ["inputs", "outputs", "allowedActions", "forbiddenActions"]) {
+      if (!Array.isArray(model[field])) failures.push(`capability model ${field} must be an array`);
+    }
+    requireStringArrayIncludes(model.doesNotOwn, "agent identity", "capability doesNotOwn", failures);
+    requireStringArrayIncludes(model.doesNotOwn, "goal progress", "capability doesNotOwn", failures);
+  }
+  if (kind === "goal") {
+    if (!stringField6(model.outcome)) failures.push("goal model must declare outcome");
+    if (!Array.isArray(model.evidence) || model.evidence.length === 0)
+      failures.push("goal model evidence must be non-empty");
+    if (!Array.isArray(model.capabilities) || model.capabilities.length === 0) {
+      failures.push("goal model capabilities must be non-empty");
+    }
+  }
+  if (kind === "agentLoop") {
+    if (!stringField6(model.cadence)) failures.push("agentLoop model must declare cadence");
+    if (!model.wakeTarget || typeof model.wakeTarget !== "object" || Array.isArray(model.wakeTarget)) {
+      failures.push("agentLoop model must declare wakeTarget object");
+    }
+  }
+  if (kind === "workflow") {
+    if (!Array.isArray(model.steps) || model.steps.length === 0) failures.push("workflow model steps must be non-empty");
+  }
+}
+function parseJsonFile(files, wantedPath, failures) {
+  const file = files.find((item) => normalizeBundlePath(item.path) === wantedPath);
+  if (!file) return null;
+  try {
+    const parsed = JSON.parse(file.content);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      failures.push(`${wantedPath} must contain a JSON object`);
+      return null;
+    }
+    return parsed;
+  } catch (err) {
+    failures.push(`${wantedPath} must contain valid JSON: ${err instanceof Error ? err.message : String(err)}`);
+    return null;
+  }
+}
+function rejectOtherRoots(paths, allowedPrefixes, kind, failures) {
+  for (const filePath of paths) {
+    if (!allowedPrefixes.some((prefix) => filePath.startsWith(prefix))) {
+      failures.push(`${kind} bundle contains out-of-bound file ${filePath}`);
+    }
+  }
+}
+function requirePath(paths, wantedPath, label, failures) {
+  if (!paths.includes(wantedPath)) failures.push(`missing ${label}: ${wantedPath}`);
+}
+function normalizeBundlePath(filePath) {
+  return filePath.replace(/^\.kody\/?/, "").replace(/^\/+/, "");
+}
+function stringField6(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+function stringArray5(value) {
+  if (!Array.isArray(value)) return [];
+  return value.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean);
+}
+function arrayObjects(value) {
+  if (!Array.isArray(value)) return [];
+  return value.filter(
+    (item) => Boolean(item) && typeof item === "object" && !Array.isArray(item)
+  );
+}
+function requireStringArrayIncludes(value, expected, label, failures) {
+  if (!stringArray5(value).includes(expected)) failures.push(`${label} must include ${expected}`);
+}
+function isSlug2(value) {
+  return /^[a-z][a-z0-9-]{0,63}$/.test(value);
+}
+function isModelKind(value) {
+  return value === "agent" || value === "capability" || value === "goal" || value === "agentLoop" || value === "workflow";
+}
+var CREATOR_CONTRACTS, FACTORY_PRODUCER, REQUIRED_DOCS, CREATOR_KIND, validateAgentFactoryBundle;
+var init_validateAgentFactoryBundle = __esm({
+  "src/scripts/validateAgentFactoryBundle.ts"() {
+    "use strict";
+    init_openAgentFactoryStatePr();
+    CREATOR_CONTRACTS = [
+      "agent-creator",
+      "goal-creator",
+      "loop-creator",
+      "workflow-creator",
+      "capability-creator"
+    ];
+    FACTORY_PRODUCER = "agent-factory";
+    REQUIRED_DOCS = {
+      agent: ["docs/agents.md"],
+      capability: ["docs/capabilities.md", "docs/capability-kind-map.md", "docs/executables.md"],
+      goal: ["docs/goals.md", "docs/jobs-model.md", "docs/capabilities.md"],
+      agentLoop: ["docs/jobs-model.md", "docs/engine-company.md", "docs/ledgers.md"],
+      workflow: ["docs/jobs-model.md", "docs/capabilities.md"]
+    };
+    CREATOR_KIND = {
+      "agent-creator": "agent",
+      "capability-creator": "capability",
+      "goal-creator": "goal",
+      "loop-creator": "agentLoop",
+      "workflow-creator": "workflow"
+    };
+    validateAgentFactoryBundle = async (ctx, profile) => {
+      if (ctx.data.agentDone !== true) return;
+      const raw = String(ctx.data.prSummary ?? "");
+      const bundle = parseAgentFactoryBundle(raw);
+      const failures = validateModelBundle(bundle, profile.name);
+      if (failures.length > 0) {
+        throw new Error(`validateAgentFactoryBundle: ${failures.join("; ")}`);
+      }
+    };
+  }
+});
+
 // src/scripts/verify.ts
 var verify;
 var init_verify2 = __esm({
@@ -19004,6 +19260,7 @@ var init_scripts = __esm({
     init_stageMergeConflicts();
     init_startFlow();
     init_syncFlow();
+    init_validateAgentFactoryBundle();
     init_verify2();
     init_verifyReproFails();
     init_verifyWithRetry();
@@ -19068,6 +19325,7 @@ var init_scripts = __esm({
       parseIssueStateFromAgentResult,
       parseJobStateFromAgentResult,
       parseReproOutput,
+      validateAgentFactoryBundle,
       writeIssueStateComment,
       writeJobStateFile,
       appendCompanyActivity,

package/dist/capabilities/agent-creator/capability.md

@@ -0,0 +1,13 @@
+# Agent Creator
+
+## Purpose
+
+Create one Kody Agent model from a focused request.
+
+## Contract
+
+The input is a request for one agent identity. The creator must use `docs/agents.md`, return one review-ready agent file, and keep tasks, schedules, tools, outputs, workflows, goals, and loops out of the agent.
+
+## Boundary
+
+This capability creates the who. It does not create what, when, or how.

package/dist/capabilities/agent-creator/profile.json

@@ -0,0 +1,7 @@
+{
+  "name": "agent-creator",
+  "action": "agent-creator",
+  "implementation": "agent-creator",
+  "capabilityKind": "act",
+  "describe": "Create one Kody agent identity model from a focused request."
+}

package/dist/capabilities/capability-creator/capability.md

@@ -0,0 +1,13 @@
+# Capability Creator
+
+## Purpose
+
+Create one complete Kody Capability model from a focused ability contract.
+
+## Contract
+
+The input is the ability to provide, its kind, interface, and constraints. The creator must use `docs/capabilities.md`, `docs/capability-kind-map.md`, and `docs/executables.md`; create one `observe`, `act`, or `verify` capability; and return review-ready files under `capabilities/<slug>/`.
+
+## Boundary
+
+This capability creates the reusable how. It does not decide who runs it, which workflow calls it, which goal consumes it, or which loop wakes it.

package/dist/capabilities/capability-creator/profile.json

@@ -0,0 +1,7 @@
+{
+  "name": "capability-creator",
+  "action": "capability-creator",
+  "implementation": "capability-creator",
+  "capabilityKind": "act",
+  "describe": "Create one complete single-responsibility Kody capability from an ability contract."
+}

package/dist/capabilities/goal-creator/capability.md

@@ -0,0 +1,13 @@
+# Goal Creator
+
+## Purpose
+
+Create one Kody Goal model from a focused outcome request.
+
+## Contract
+
+The input is one desired durable outcome. The creator must use `docs/goals.md`, `docs/jobs-model.md`, and `docs/capabilities.md`; define evidence, allowed capabilities, route, facts, and blockers; and keep implementation and cadence details out of the goal.
+
+## Boundary
+
+This capability creates the what. It does not create who, when, or implementation how.

package/dist/capabilities/goal-creator/profile.json

@@ -0,0 +1,7 @@
+{
+  "name": "goal-creator",
+  "action": "goal-creator",
+  "implementation": "goal-creator",
+  "capabilityKind": "act",
+  "describe": "Create one Kody goal outcome model from a focused request."
+}

package/dist/capabilities/loop-creator/capability.md

@@ -0,0 +1,13 @@
+# Loop Creator
+
+## Purpose
+
+Create one Kody AgentLoop model from a focused wakeup request.
+
+## Contract
+
+The input is one cadence and wakeup need. The creator must use `docs/jobs-model.md`, `docs/engine-company.md`, and `docs/ledgers.md`; define cadence, target, and operational ledger needs; and keep business completion out of the loop.
+
+## Boundary
+
+This capability creates the when. It does not create who, what, or implementation how.

package/dist/capabilities/loop-creator/profile.json

@@ -0,0 +1,7 @@
+{
+  "name": "loop-creator",
+  "action": "loop-creator",
+  "implementation": "loop-creator",
+  "capabilityKind": "act",
+  "describe": "Create one Kody agent loop wakeup model from a focused request."
+}

package/dist/capabilities/workflow-creator/capability.md

@@ -0,0 +1,13 @@
+# Workflow Creator
+
+## Purpose
+
+Create one Kody Workflow model from a focused ordered-run request.
+
+## Contract
+
+The input is one need for ordered capability steps in a single run. The creator must use `docs/jobs-model.md` and `docs/capabilities.md`; define step order and reasons; and keep long-term progress, cadence, completion, and implementation internals out of the workflow.
+
+## Boundary
+
+This capability creates composed how for one run. It does not create who, durable what, or when.

package/dist/capabilities/workflow-creator/profile.json

@@ -0,0 +1,7 @@
+{
+  "name": "workflow-creator",
+  "action": "workflow-creator",
+  "implementation": "workflow-creator",
+  "capabilityKind": "act",
+  "describe": "Create one Kody workflow ordered-run model from a focused request."
+}

package/dist/executables/agent-creator/profile.json

@@ -0,0 +1,65 @@
+{
+  "name": "agent-creator",
+  "action": "agent-creator",
+  "describe": "Create one Kody agent identity model from a focused request.",
+  "role": "primitive",
+  "kind": "oneshot",
+  "inputs": [
+    {
+      "name": "issue",
+      "flag": "--issue",
+      "type": "int",
+      "required": true,
+      "describe": "GitHub issue number containing the focused model creation request."
+    }
+  ],
+  "claudeCode": {
+    "model": "inherit",
+    "permissionMode": "default",
+    "maxTurns": null,
+    "maxTurnTimeoutSec": 1200,
+    "systemPromptAppend": null,
+    "cacheable": true,
+    "enableVerifyTool": false,
+    "tools": [
+      "Read",
+      "Grep",
+      "Glob"
+    ],
+    "hooks": [],
+    "skills": [],
+    "commands": [],
+    "subagents": [],
+    "plugins": [],
+    "mcpServers": []
+  },
+  "cliTools": [],
+  "scripts": {
+    "preflight": [
+      {
+        "script": "loadIssueContext"
+      },
+      {
+        "script": "composePrompt"
+      }
+    ],
+    "postflight": [
+      {
+        "script": "parseAgentResult"
+      },
+      {
+        "script": "validateAgentFactoryBundle"
+      },
+      {
+        "script": "openAgentFactoryStatePr"
+      }
+    ]
+  },
+  "output": {
+    "actionTypes": [
+      "AGENT_CREATOR_COMPLETED",
+      "AGENT_CREATOR_FAILED",
+      "AGENT_NOT_RUN"
+    ]
+  }
+}

package/dist/executables/agent-creator/prompt.md

@@ -0,0 +1,86 @@
+You are Kody's agent-creator. Create exactly one Agent model.
+
+# Target
+
+- Consumer repo: {{repoOwner}}/{{repoName}}
+- Default branch: {{defaultBranch}}
+- Issue #{{issue.number}}: {{issue.title}}
+
+# Authoritative model docs
+
+Read and follow these docs before producing the model:
+
+- `docs/agents.md`
+
+These docs are contract references. If the consumer repo does not contain them or `Read` fails, continue from the model boundary below and still list the referenced doc paths in `model.docsUsed`.
+
+# Operator Request
+
+{{issue.body}}
+
+# Recent comments (most recent first, truncated)
+
+{{issue.commentsFormatted}}
+
+# Model Boundary
+
+An Agent is the agency's **who**.
+
+Own:
+
+- identity
+- judgment style
+- priorities
+- hard behavioral boundaries
+
+Do not own:
+
+- tasks
+- schedules
+- tools
+- capability inputs or outputs
+- workflow steps
+- goal evidence
+- loop cadence
+
+# Task
+
+Create the smallest review-ready Agent model that satisfies the request.
+
+Do not call Bash, Write, Edit, mkdir, cat, tee, printf, python, node, git, gh, or any external command. Your only mutation channel is `PR_SUMMARY.files`; the deterministic postflight opens the state-repo review PR from that JSON.
+
+Use current storage names in file paths. Put the generated agent at:
+
+`agents/<slug>.md`
+
+Do not create capability, workflow, goal, loop, or implementation files.
+
+# Final Output Contract
+
+If the request is too ambiguous to produce one review-ready Agent model, output one line:
+
+FAILED: <specific missing decision>
+
+Otherwise output exactly:
+
+DONE
+PR_SUMMARY:
+{
+  "title": "short title",
+  "summary": "human explanation and assumptions",
+  "model": {
+    "kind": "agent",
+    "slug": "agent-slug",
+    "docsUsed": ["docs/agents.md"],
+    "owns": ["identity", "judgment", "boundaries"],
+    "doesNotOwn": ["tasks", "schedules", "tools", "outputs"]
+  },
+  "files": [
+    {
+      "path": "agents/example.md",
+      "content": "# Example\n\n..."
+    }
+  ]
+}
+
+The `PR_SUMMARY` value must be valid JSON. Do not wrap it in a markdown code fence.

package/dist/executables/agent-factory/profile.json

@@ -44,12 +44,15 @@
       }
     ],
     "postflight": [
-      {
-        "script": "parseAgentResult"
-      },
-      {
-        "script": "openAgentFactoryStatePr"
-      }
+    {
+      "script": "parseAgentResult"
+    },
+    {
+      "script": "validateAgentFactoryBundle"
+    },
+    {
+      "script": "openAgentFactoryStatePr"
+    }
     ]
   },
   "output": {

package/dist/executables/agent-factory/prompt.md

@@ -20,6 +20,26 @@ You are Kody's agent factory. Convert the operator request into review-ready Kod
 
 Design the smallest Kody model structure that satisfies the request. You may create or assemble simple capability implementation profiles, capabilities, loops, goals, and agents.
 
+Treat each generated model as if it were produced by its model-specific creator. Do not let the factory invent mixed-responsibility files.
+
+The docs named in the creator contracts are contract references. If the consumer repo does not contain them or `Read` fails, continue from the table below and still list the referenced doc paths in each model's `docsUsed`.
+
+## Model creator contracts
+
+Use these contracts when deciding whether a file belongs in the bundle:
+
+| Model | Creator contract | Authoritative docs | Owns | Must not own |
+| --- | --- | --- | --- | --- |
+| Agent | `agent-creator` | `docs/agents.md` | identity, judgment, boundaries | tasks, schedules, tools, outputs, workflows, goals, loops |
+| Goal | `goal-creator` | `docs/goals.md`, `docs/jobs-model.md`, `docs/capabilities.md` | outcome, evidence, allowed capabilities, route, facts, blockers | capability implementation, agent identity, loop cadence |
+| Loop | `loop-creator` | `docs/jobs-model.md`, `docs/engine-company.md`, `docs/ledgers.md` | cadence, wakeup policy, target, operational cursor/dedup | business completion, goal evidence, workflow order, implementation |
+| Workflow | `workflow-creator` | `docs/jobs-model.md`, `docs/capabilities.md` | ordered capability steps for one run | long-term progress, schedule, goal completion, agent identity, implementation internals |
+| Capability | `capability-creator` | `docs/capabilities.md`, `docs/capability-kind-map.md`, `docs/executables.md` | one reusable `observe`, `act`, or `verify` ability, interface, constraints, implementation | requester identity, caller workflow, parent goal progress, loop cadence, agent identity |
+
+If one generated model needs information from another, reference the other model by slug. Do not copy that model's responsibility into the file.
+
+Capability files must be shaped by ability, kind, interface, and constraints. Do not include fields or prose that make the capability depend on who asked for it, which workflow calls it, which goal consumes it, which loop wakes it, or which agent may run it.
+
 Use the current Kody vocabulary:
 
 - intent: why the agency should care
@@ -58,6 +78,27 @@ PR_SUMMARY:
 {
   "title": "short title",
   "summary": "human explanation and assumptions",
+  "modelCreatorContractsUsed": [
+    "agent-creator",
+    "goal-creator",
+    "loop-creator",
+    "workflow-creator",
+    "capability-creator"
+  ],
+  "models": [
+    {
+      "kind": "capability",
+      "slug": "example",
+      "capabilityKind": "act",
+      "ability": "one reusable ability",
+      "docsUsed": ["docs/capabilities.md", "docs/capability-kind-map.md", "docs/executables.md"],
+      "inputs": [],
+      "outputs": [],
+      "allowedActions": [],
+      "forbiddenActions": [],
+      "doesNotOwn": ["agent identity", "goal progress", "loop cadence", "workflow order"]
+    }
+  ],
   "files": [
     {
       "path": "capabilities/example/profile.json",

package/dist/executables/capability-creator/profile.json

@@ -0,0 +1,65 @@
+{
+  "name": "capability-creator",
+  "action": "capability-creator",
+  "describe": "Create one complete single-responsibility Kody capability from an ability contract.",
+  "role": "primitive",
+  "kind": "oneshot",
+  "inputs": [
+    {
+      "name": "issue",
+      "flag": "--issue",
+      "type": "int",
+      "required": true,
+      "describe": "GitHub issue number containing the focused model creation request."
+    }
+  ],
+  "claudeCode": {
+    "model": "inherit",
+    "permissionMode": "default",
+    "maxTurns": null,
+    "maxTurnTimeoutSec": 1200,
+    "systemPromptAppend": null,
+    "cacheable": true,
+    "enableVerifyTool": false,
+    "tools": [
+      "Read",
+      "Grep",
+      "Glob"
+    ],
+    "hooks": [],
+    "skills": [],
+    "commands": [],
+    "subagents": [],
+    "plugins": [],
+    "mcpServers": []
+  },
+  "cliTools": [],
+  "scripts": {
+    "preflight": [
+      {
+        "script": "loadIssueContext"
+      },
+      {
+        "script": "composePrompt"
+      }
+    ],
+    "postflight": [
+      {
+        "script": "parseAgentResult"
+      },
+      {
+        "script": "validateAgentFactoryBundle"
+      },
+      {
+        "script": "openAgentFactoryStatePr"
+      }
+    ]
+  },
+  "output": {
+    "actionTypes": [
+      "CAPABILITY_CREATOR_COMPLETED",
+      "CAPABILITY_CREATOR_FAILED",
+      "AGENT_NOT_RUN"
+    ]
+  }
+}

package/dist/executables/capability-creator/prompt.md

@@ -0,0 +1,105 @@
+You are Kody's capability-creator. Create exactly one complete Capability model.
+
+# Target
+
+- Consumer repo: {{repoOwner}}/{{repoName}}
+- Default branch: {{defaultBranch}}
+- Issue #{{issue.number}}: {{issue.title}}
+
+# Authoritative model docs
+
+Read and follow these docs before producing the model:
+
+- `docs/capabilities.md`
+- `docs/capability-kind-map.md`
+- `docs/executables.md`
+
+These docs are contract references. If the consumer repo does not contain them or `Read` fails, continue from the model boundary below and still list the referenced doc paths in `model.docsUsed`.
+
+# Operator Request
+
+{{issue.body}}
+
+# Recent comments (most recent first, truncated)
+
+{{issue.commentsFormatted}}
+
+# Model Boundary
+
+A Capability is the agency's reusable **how**.
+
+The capability is defined by the ability contract only:
+
+- ability
+- exactly one `capabilityKind`: `observe`, `act`, or `verify`
+- input interface
+- output/result interface
+- allowed actions
+- forbidden actions
+- implementation profile and prompt/scripts when needed
+
+Do not shape the capability around:
+
+- who requested it
+- which workflow will call it
+- which goal may consume its evidence
+- which loop may wake it
+- which agent may run it
+
+Those are wiring decisions outside this model.
+
+# Task
+
+Create the smallest review-ready Capability model that satisfies the requested ability.
+
+Do not call Bash, Write, Edit, mkdir, cat, tee, printf, python, node, git, gh, or any external command. Your only mutation channel is `PR_SUMMARY.files`; the deterministic postflight opens the state-repo review PR from that JSON.
+
+Use current storage names in file paths. Put generated files under:
+
+`capabilities/<slug>/`
+
+Required files:
+
+- `capabilities/<slug>/profile.json`
+- `capabilities/<slug>/capability.md`
+
+Add colocated prompt/scripts only if the capability needs a new implementation. Reuse existing capabilities, implementation profiles, skills, or scripts when they fit.
+
+# Final Output Contract
+
+If the request is too ambiguous to produce one review-ready Capability model, output one line:
+
+FAILED: <specific missing decision>
+
+Otherwise output exactly:
+
+DONE
+PR_SUMMARY:
+{
+  "title": "short title",
+  "summary": "human explanation and assumptions",
+  "model": {
+    "kind": "capability",
+    "slug": "capability-slug",
+    "capabilityKind": "observe|act|verify",
+    "ability": "one reusable ability",
+    "docsUsed": ["docs/capabilities.md", "docs/capability-kind-map.md", "docs/executables.md"],
+    "inputs": [],
+    "outputs": [],
+    "allowedActions": [],
+    "forbiddenActions": [],
+    "doesNotOwn": ["agent identity", "goal progress", "loop cadence", "workflow order"]
+  },
+  "files": [
+    {
+      "path": "capabilities/example/profile.json",
+      "content": "{\n  \"name\": \"example\"\n}\n"
+    },
+    {
+      "path": "capabilities/example/capability.md",
+      "content": "# Example\n\n..."
+    }
+  ]
+}
+
+The `PR_SUMMARY` value must be valid JSON. Do not wrap it in a markdown code fence.

package/dist/executables/goal-creator/profile.json

@@ -0,0 +1,65 @@
+{
+  "name": "goal-creator",
+  "action": "goal-creator",
+  "describe": "Create one Kody goal outcome model from a focused request.",
+  "role": "primitive",
+  "kind": "oneshot",
+  "inputs": [
+    {
+      "name": "issue",
+      "flag": "--issue",
+      "type": "int",
+      "required": true,
+      "describe": "GitHub issue number containing the focused model creation request."
+    }
+  ],
+  "claudeCode": {
+    "model": "inherit",
+    "permissionMode": "default",
+    "maxTurns": null,
+    "maxTurnTimeoutSec": 1200,
+    "systemPromptAppend": null,
+    "cacheable": true,
+    "enableVerifyTool": false,
+    "tools": [
+      "Read",
+      "Grep",
+      "Glob"
+    ],
+    "hooks": [],
+    "skills": [],
+    "commands": [],
+    "subagents": [],
+    "plugins": [],
+    "mcpServers": []
+  },
+  "cliTools": [],
+  "scripts": {
+    "preflight": [
+      {
+        "script": "loadIssueContext"
+      },
+      {
+        "script": "composePrompt"
+      }
+    ],
+    "postflight": [
+      {
+        "script": "parseAgentResult"
+      },
+      {
+        "script": "validateAgentFactoryBundle"
+      },
+      {
+        "script": "openAgentFactoryStatePr"
+      }
+    ]
+  },
+  "output": {
+    "actionTypes": [
+      "GOAL_CREATOR_COMPLETED",
+      "GOAL_CREATOR_FAILED",
+      "AGENT_NOT_RUN"
+    ]
+  }
+}

package/dist/executables/goal-creator/prompt.md

@@ -0,0 +1,91 @@
+You are Kody's goal-creator. Create exactly one Goal model.
+
+# Target
+
+- Consumer repo: {{repoOwner}}/{{repoName}}
+- Default branch: {{defaultBranch}}
+- Issue #{{issue.number}}: {{issue.title}}
+
+# Authoritative model docs
+
+Read and follow these docs before producing the model:
+
+- `docs/goals.md`
+- `docs/jobs-model.md`
+- `docs/capabilities.md`
+
+These docs are contract references. If the consumer repo does not contain them or `Read` fails, continue from the model boundary below and still list the referenced doc paths in `model.docsUsed`.
+
+# Operator Request
+
+{{issue.body}}
+
+# Recent comments (most recent first, truncated)
+
+{{issue.commentsFormatted}}
+
+# Model Boundary
+
+A Goal is the agency's durable **what**.
+
+Own:
+
+- outcome
+- ordered evidence
+- allowed capabilities
+- route from evidence to capability
+- facts
+- blockers
+- completion rules
+
+Do not own:
+
+- capability implementation details
+- agent identity
+- loop cadence
+- workflow step internals
+- consumer repo product history
+
+# Task
+
+Create the smallest review-ready managed Goal model that satisfies the requested outcome.
+
+Do not call Bash, Write, Edit, mkdir, cat, tee, printf, python, node, git, gh, or any external command. Your only mutation channel is `PR_SUMMARY.files`; the deterministic postflight opens the state-repo review PR from that JSON.
+
+Use current storage names in file paths. Put generated templates under:
+
+`goals/templates/<slug>/state.json`
+
+Do not create live runtime instances. Runtime instances belong in the configured state repo after activation.
+
+# Final Output Contract
+
+If the request is too ambiguous to produce one review-ready Goal model, output one line:
+
+FAILED: <specific missing decision>
+
+Otherwise output exactly:
+
+DONE
+PR_SUMMARY:
+{
+  "title": "short title",
+  "summary": "human explanation and assumptions",
+  "model": {
+    "kind": "goal",
+    "slug": "goal-slug",
+    "docsUsed": ["docs/goals.md", "docs/jobs-model.md", "docs/capabilities.md"],
+    "outcome": "durable outcome",
+    "evidence": [],
+    "capabilities": [],
+    "doesNotOwn": ["capability implementation", "agent identity", "loop cadence"]
+  },
+  "files": [
+    {
+      "path": "goals/templates/example/state.json",
+      "content": "{\n  \"version\": 1\n}\n"
+    }
+  ]
+}
+
+The `PR_SUMMARY` value must be valid JSON. Do not wrap it in a markdown code fence.

package/dist/executables/loop-creator/profile.json

@@ -0,0 +1,65 @@
+{
+  "name": "loop-creator",
+  "action": "loop-creator",
+  "describe": "Create one Kody agent loop wakeup model from a focused request.",
+  "role": "primitive",
+  "kind": "oneshot",
+  "inputs": [
+    {
+      "name": "issue",
+      "flag": "--issue",
+      "type": "int",
+      "required": true,
+      "describe": "GitHub issue number containing the focused model creation request."
+    }
+  ],
+  "claudeCode": {
+    "model": "inherit",
+    "permissionMode": "default",
+    "maxTurns": null,
+    "maxTurnTimeoutSec": 1200,
+    "systemPromptAppend": null,
+    "cacheable": true,
+    "enableVerifyTool": false,
+    "tools": [
+      "Read",
+      "Grep",
+      "Glob"
+    ],
+    "hooks": [],
+    "skills": [],
+    "commands": [],
+    "subagents": [],
+    "plugins": [],
+    "mcpServers": []
+  },
+  "cliTools": [],
+  "scripts": {
+    "preflight": [
+      {
+        "script": "loadIssueContext"
+      },
+      {
+        "script": "composePrompt"
+      }
+    ],
+    "postflight": [
+      {
+        "script": "parseAgentResult"
+      },
+      {
+        "script": "validateAgentFactoryBundle"
+      },
+      {
+        "script": "openAgentFactoryStatePr"
+      }
+    ]
+  },
+  "output": {
+    "actionTypes": [
+      "LOOP_CREATOR_COMPLETED",
+      "LOOP_CREATOR_FAILED",
+      "AGENT_NOT_RUN"
+    ]
+  }
+}

package/dist/executables/loop-creator/prompt.md

@@ -0,0 +1,86 @@
+You are Kody's loop-creator. Create exactly one AgentLoop model.
+
+# Target
+
+- Consumer repo: {{repoOwner}}/{{repoName}}
+- Default branch: {{defaultBranch}}
+- Issue #{{issue.number}}: {{issue.title}}
+
+# Authoritative model docs
+
+Read and follow these docs before producing the model:
+
+- `docs/jobs-model.md`
+- `docs/engine-company.md`
+- `docs/ledgers.md`
+
+These docs are contract references. If the consumer repo does not contain them or `Read` fails, continue from the model boundary below and still list the referenced doc paths in `model.docsUsed`.
+
+# Operator Request
+
+{{issue.body}}
+
+# Recent comments (most recent first, truncated)
+
+{{issue.commentsFormatted}}
+
+# Model Boundary
+
+An AgentLoop is the agency's **when**.
+
+Own:
+
+- cadence
+- wakeup policy
+- target to wake: goal, workflow, or capability
+- operational cursor or dedup ledger when needed
+
+Do not own:
+
+- business completion
+- goal evidence decisions
+- capability implementation
+- workflow step order
+- agent identity
+
+# Task
+
+Create the smallest review-ready AgentLoop model that satisfies the requested wakeup behavior.
+
+Do not call Bash, Write, Edit, mkdir, cat, tee, printf, python, node, git, gh, or any external command. Your only mutation channel is `PR_SUMMARY.files`; the deterministic postflight opens the state-repo review PR from that JSON.
+
+Use current storage names in file paths. Put generated loop state under the current loop/state model used by the docs. If the request needs a shared template rather than a live runtime state, make that explicit in the summary.
+
+# Final Output Contract
+
+If the request is too ambiguous to produce one review-ready AgentLoop model, output one line:
+
+FAILED: <specific missing decision>
+
+Otherwise output exactly:
+
+DONE
+PR_SUMMARY:
+{
+  "title": "short title",
+  "summary": "human explanation and assumptions",
+  "model": {
+    "kind": "agentLoop",
+    "slug": "loop-slug",
+    "docsUsed": ["docs/jobs-model.md", "docs/engine-company.md", "docs/ledgers.md"],
+    "cadence": "manual|1h|1d|7d|30d",
+    "wakeTarget": {
+      "type": "goal|workflow|capability",
+      "slug": "target-slug"
+    },
+    "doesNotOwn": ["business completion", "goal evidence", "capability implementation"]
+  },
+  "files": [
+    {
+      "path": "goals/templates/example-loop/state.json",
+      "content": "{\n  \"state\": \"active\"\n}\n"
+    }
+  ]
+}
+
+The `PR_SUMMARY` value must be valid JSON. Do not wrap it in a markdown code fence.

package/dist/executables/workflow-creator/profile.json

@@ -0,0 +1,65 @@
+{
+  "name": "workflow-creator",
+  "action": "workflow-creator",
+  "describe": "Create one Kody workflow ordered-run model from a focused request.",
+  "role": "primitive",
+  "kind": "oneshot",
+  "inputs": [
+    {
+      "name": "issue",
+      "flag": "--issue",
+      "type": "int",
+      "required": true,
+      "describe": "GitHub issue number containing the focused model creation request."
+    }
+  ],
+  "claudeCode": {
+    "model": "inherit",
+    "permissionMode": "default",
+    "maxTurns": null,
+    "maxTurnTimeoutSec": 1200,
+    "systemPromptAppend": null,
+    "cacheable": true,
+    "enableVerifyTool": false,
+    "tools": [
+      "Read",
+      "Grep",
+      "Glob"
+    ],
+    "hooks": [],
+    "skills": [],
+    "commands": [],
+    "subagents": [],
+    "plugins": [],
+    "mcpServers": []
+  },
+  "cliTools": [],
+  "scripts": {
+    "preflight": [
+      {
+        "script": "loadIssueContext"
+      },
+      {
+        "script": "composePrompt"
+      }
+    ],
+    "postflight": [
+      {
+        "script": "parseAgentResult"
+      },
+      {
+        "script": "validateAgentFactoryBundle"
+      },
+      {
+        "script": "openAgentFactoryStatePr"
+      }
+    ]
+  },
+  "output": {
+    "actionTypes": [
+      "WORKFLOW_CREATOR_COMPLETED",
+      "WORKFLOW_CREATOR_FAILED",
+      "AGENT_NOT_RUN"
+    ]
+  }
+}

package/dist/executables/workflow-creator/prompt.md

@@ -0,0 +1,86 @@
+You are Kody's workflow-creator. Create exactly one Workflow model.
+
+# Target
+
+- Consumer repo: {{repoOwner}}/{{repoName}}
+- Default branch: {{defaultBranch}}
+- Issue #{{issue.number}}: {{issue.title}}
+
+# Authoritative model docs
+
+Read and follow these docs before producing the model:
+
+- `docs/jobs-model.md`
+- `docs/capabilities.md`
+
+These docs are contract references. If the consumer repo does not contain them or `Read` fails, continue from the model boundary below and still list the referenced doc paths in `model.docsUsed`.
+
+# Operator Request
+
+{{issue.body}}
+
+# Recent comments (most recent first, truncated)
+
+{{issue.commentsFormatted}}
+
+# Model Boundary
+
+A Workflow is the agency's composed **how for one run**.
+
+Own:
+
+- ordered capability steps
+- step reasons
+- shared step outputs for that run
+- final run output
+
+Do not own:
+
+- long-term progress
+- schedule/cadence
+- goal completion
+- agent identity
+- capability implementation internals
+
+# Task
+
+Create the smallest review-ready Workflow model that satisfies the requested ordered run behavior.
+
+Do not call Bash, Write, Edit, mkdir, cat, tee, printf, python, node, git, gh, or any external command. Your only mutation channel is `PR_SUMMARY.files`; the deterministic postflight opens the state-repo review PR from that JSON.
+
+Prefer placing workflow steps on the public capability that owns the composed action. Do not create a workflow when a single capability is enough.
+
+# Final Output Contract
+
+If the request is too ambiguous to produce one review-ready Workflow model, output one line:
+
+FAILED: <specific missing decision>
+
+Otherwise output exactly:
+
+DONE
+PR_SUMMARY:
+{
+  "title": "short title",
+  "summary": "human explanation and assumptions",
+  "model": {
+    "kind": "workflow",
+    "slug": "workflow-slug",
+    "docsUsed": ["docs/jobs-model.md", "docs/capabilities.md"],
+    "steps": [
+      {
+        "capability": "capability-slug",
+        "reason": "why this step exists"
+      }
+    ],
+    "doesNotOwn": ["long-term progress", "schedule", "goal completion", "agent identity"]
+  },
+  "files": [
+    {
+      "path": "capabilities/example/profile.json",
+      "content": "{\n  \"workflow\": { \"steps\": [] }\n}\n"
+    }
+  ]
+}
+
+The `PR_SUMMARY` value must be valid JSON. Do not wrap it in a markdown code fence.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kody-ade/kody-engine",
-  "version": "0.4.330",
+  "version": "0.4.332",
   "description": "kody — autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   "license": "MIT",
   "type": "module",